How to spot imposter scams

The first element is a borrowed identity. The caller, email or message claims to be someone whose authority you would not ordinarily question — a federal agency, your bank's fraud department, a utility, a well-known technology company, a police officer, or a relative.

The second is urgency. Something terrible is about to happen and only immediate action prevents it: an arrest warrant, a suspended Social Security number, a frozen account, a computer infected and leaking your data, a family member in jail. Urgency exists to prevent you doing the one thing that would expose the scam, which is checking.

The third is an unusual payment method. Gift cards, wire transfers, cryptocurrency, payment apps, or couriered cash. These share one property: once sent, the money is effectively unrecoverable. No legitimate organisation asks for any of them.

Isolation is a common fourth element. You are told not to discuss it with anyone, that the matter is confidential, that talking to family would obstruct an investigation, or that bank staff are involved. Any instruction to keep a payment secret is diagnostic on its own.

Once you see the structure, you no longer need to evaluate the story. A caller demanding immediate payment in gift cards is a scam whether they claim to be the IRS, a court, a utility or a police department — the specific claim does not matter.

This is why the defence is procedural rather than analytical. You are not trying to out-argue a professional; you are refusing to transact under pressure on an inbound contact, regardless of how convincing it is.

Note that these scams are worked by organised operations with scripts, training and shift patterns. Being persuaded by one is not a failure of intelligence, and shame is the main reason victims do not report or seek help early enough to recover anything.

The IRS does not initiate contact by phone, email or text demanding immediate payment, and it does not threaten arrest, deportation or licence revocation for non-payment. Genuine tax matters begin with correspondence by mail, and taxpayers have appeal rights that a real process would tell you about rather than deny.

Social Security impersonation typically claims that your number has been suspended, linked to a crime, or requires verification. Social Security numbers are not suspended. Any call making that claim is fraudulent regardless of what the caller identification shows.

Other government imposters claim to be from immigration authorities, courts, law enforcement, or benefit agencies. Common demands include payment of fines, bail, back taxes, or a fee to secure a benefit or grant. Federal benefits and grants never require an upfront payment.

Utility impersonation threatens imminent disconnection unless payment is made immediately, often timed to hot or cold weather. Utilities have notice procedures and do not turn up unannounced demanding a prepaid card.

Jury duty scams claim you missed jury service and face a fine or arrest unless you pay. Courts do not collect penalties by telephone.

A newer variant reverses the direction: someone claiming to be from a government agency says you are owed a refund, and needs your bank details or a small processing fee to send it. The promise of money is as effective as the threat of loss and attracts less suspicion.

Some operations spoof genuine agency numbers so that caller identification displays the real one, and some send follow-up emails or documents with convincing logos and badge numbers. Neither proves anything — both are easy to fabricate.

Tech support scams usually begin with a pop-up warning that your computer is infected, displaying a number to call, or with a call claiming to have detected a problem. Legitimate software does not display a telephone number in a security warning, and no company monitors your personal computer for viruses and rings you about it.

The objective is usually remote access to your device, from which they can display fake evidence of problems, access accounts, install genuine malware, or simply charge for fixing something that was never wrong. Never grant remote access to someone who contacted you.

A common escalation involves claiming to have refunded you too much and asking you to return the difference — after showing a doctored account page. The original refund never happened.

Bank fraud department impersonation has become one of the most effective formats in use. The caller says fraudulent activity has been detected and asks you to confirm details, read out a verification code, or move money to a 'safe account'. There is no such thing as a safe account, and no bank asks you to move money to protect it.

Never read a verification code to anyone who calls you. Those codes exist precisely to stop someone else accessing your account, and giving one away hands over the access it was protecting.

Delivery and package scams send a text about a failed delivery with a link to reschedule or pay a small fee, harvesting card details and personal information. The small amount is the point — it is low enough not to trigger scrutiny.

Subscription renewal scams email an invoice for a service you supposedly bought, with a number to call to cancel. The invoice is fake; calling the number starts a tech support or refund scam.

Business email compromise targets organisations, with a message appearing to come from an executive or supplier requesting an urgent transfer or a change of bank details. Any change of payment details should be verified by a call to a known contact on a known number, without exception.

The grandparent scam involves a call claiming a grandchild or relative is in trouble — arrested, hospitalised, in an accident abroad — and needs money immediately. It often includes a plea not to tell their parents, which supplies both urgency and isolation.

Voice cloning has made this considerably more dangerous. A short sample from social media is sufficient to generate a convincing imitation, so a familiar voice is no longer evidence of anything.

The defence is to hang up and contact the person directly on their own number, or contact another family member. Agreeing a family code word in advance, known only to family, is a simple and effective safeguard that costs nothing.

Romance scams work over much longer periods, building a genuine emotional relationship before money is ever mentioned. The pattern is consistent: a plausible reason never to meet in person or appear on video, rapid emotional intensity, a crisis requiring money, and requests for cryptocurrency or wire transfers.

A growing variant combines romance with fake investment, in which the relationship leads to advice about a trading or cryptocurrency platform. The platform shows growing balances and permits a small withdrawal to build trust, then blocks larger ones or demands fees and taxes before releasing funds. Losses in this category are frequently very large.

Anyone asking you to receive money and forward it, or to receive and reship packages, is recruiting you into money laundering regardless of the story attached. This carries legal consequences for you as well as financial ones.

Recovery scams target people who have already been defrauded, offering to retrieve lost money for a fee. Victim lists circulate among fraudsters, which is why a second approach often follows the first. Nobody can guarantee recovery, and legitimate law enforcement does not charge for it.

If someone you have never met in person asks for money, that is the entire test. It does not matter how long you have known them or how consistent their story has been.

Stop and disengage. Hang up, close the message, do not click the link. Ending the interaction costs nothing and removes the time pressure the scam depends on.

Verify independently. Look up the organisation's number yourself — from a bill, a card, an official website you navigate to directly — and call that. Never use a number, link or email address supplied by the person who contacted you.

Tell someone before paying anything unusual. Explaining the situation out loud to another person breaks the isolation and is one of the most effective interventions available. Banks and shop staff intervene in these situations regularly and are worth listening to.

If you have already paid, act immediately — speed determines what can be recovered. Contact your bank or card issuer at once, contact the wire transfer or payment app company, and if you bought gift cards, contact the issuer straight away and keep the cards and receipts, because funds are occasionally frozen if reported fast enough. Cryptocurrency is generally unrecoverable.

If you gave out personal information, treat it as identity theft: place a fraud alert or credit freeze, monitor accounts and statements, and change passwords starting with email, because email access allows resets everywhere else. Turn on two-factor authentication.

If you gave remote access to a device, disconnect it from the internet, have it examined by a reputable technician, and change passwords from a different device rather than the compromised one.

Report it. Fraud reports go to the FTC, internet-enabled crime to the FBI's Internet Crime Complaint Center, and state attorneys general and consumer offices handle complaints too. Reports feed enforcement action even when they cannot recover your money.

Do not blame yourself, and do not stay quiet. These are professional operations, victims include highly capable people, and shame is the principal reason losses go unreported and unrecovered. Talking about it also protects the people around you.